$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138362e302f32332d3234203d3e20323132333335.roa File: 3230302e3134392e3138362e302f32332d3234203d3e20323132333335.roa (raw, json) Hash identifier: dNItlICTaJL8mUU/pGH9nRP2Qmop975a7Ok0a4rm8hM= Subject key identifier: 59:3A:86:D3:98:8F:C6:C9:55:AC:80:EC:2A:FF:C5:5D:26:C9:30:73 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 430425954695B9772D3AB36CA379D8EF15AB4A4C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138362e302f32332d3234203d3e20323132333335.roa Signing time: Thu 17 Sep 2026 05:46:09 +0000 ROA not before: Thu 17 Sep 2026 05:41:09 +0000 ROA not after: Thu 16 Sep 2027 05:46:09 +0000 asID: 212335 IP address blocks: 200.149.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:25:95:46:95:b9:77:2d:3a:b3:6c:a3:79:d8:ef:15:ab:4a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:09 2026 GMT Not After : Sep 16 05:46:09 2027 GMT Subject: CN=593A86D3988FC6C955AC80EC2AFFC55D26C93073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:a1:cb:52:4b:d8:5a:10:8b:f7:fe:df:46: 0c:6e:d2:90:24:80:bc:43:a3:82:0d:75:e4:7d:f5: 54:20:f2:c4:0c:ee:65:80:db:95:c1:75:a7:55:83: 26:20:be:d9:c3:d1:37:a9:0f:e0:bd:92:48:51:8f: 6f:5f:9b:e3:c3:0d:2d:45:c4:ae:59:6f:c1:8c:0e: d8:f7:ac:e3:e7:80:f1:ab:5b:ed:0b:c5:3f:8f:c3: 2b:bf:c4:f9:5b:00:0a:d7:1f:5c:8b:0b:b8:84:bc: 63:1b:34:45:a8:df:d4:6c:6b:87:4b:19:64:bb:d6: 04:1f:a5:4e:c9:8f:62:f0:41:7e:68:d9:95:16:a2: 4f:83:77:5c:55:75:61:de:f7:a1:41:ba:c5:3b:2c: e7:a2:3c:72:b2:1e:54:7d:53:2c:0e:d0:5a:a9:b6: fe:6f:db:76:b5:21:11:0d:c6:25:77:c8:c1:ff:6c: 82:cf:53:78:eb:21:f2:c5:33:d7:c0:33:09:1e:c3: 95:34:40:41:37:88:b8:c2:53:5e:47:57:0c:96:65: 74:87:8b:7b:4b:3a:27:66:68:74:4a:4f:cb:b0:73: 0d:a6:7e:44:0e:17:cb:0e:f3:ab:cf:43:2d:4a:8d: 4b:d7:fa:cf:1c:8d:b8:b1:d9:84:10:b7:11:16:02: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:86:D3:98:8F:C6:C9:55:AC:80:EC:2A:FF:C5:5D:26:C9:30:73 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138362e302f32332d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.186.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:09:c1:6e:5d:ad:cc:46:76:42:f6:56:c2:3f:d2:6f:0d:1e: 17:14:e9:7c:69:2a:e6:93:0c:e3:4b:51:17:c4:ab:b8:02:94: 00:61:d2:9d:08:8a:9b:91:54:3a:d1:ed:f9:b9:b2:a7:21:f2: 10:3d:07:12:96:b1:20:92:ed:12:9a:04:20:7d:1a:2a:d6:c0: a9:53:f7:3c:be:df:f5:64:b0:07:5e:e4:b3:16:56:8f:3e:4e: f7:0d:0e:5c:0d:b4:2a:29:8d:7e:73:8c:4d:fa:4a:59:2f:88: 43:f0:6a:93:fc:6f:3f:00:62:7a:d3:c4:4c:c3:8a:a9:cd:21: 68:a8:3e:57:c5:15:0c:52:7b:09:5f:32:2c:38:00:19:e5:c9: b1:1c:e2:1e:e0:bd:af:b7:4b:91:b5:a2:f4:53:8a:d2:fb:39: 76:14:a0:2b:b6:90:83:c5:fa:d7:0e:98:05:f8:70:5b:a9:c5: bb:14:1c:24:b0:44:9a:87:8d:fa:4b:1a:9c:d3:19:e6:78:2f: f4:11:b0:4f:89:95:4a:56:dc:0c:b4:13:12:c9:33:c2:7f:eb: 06:13:3a:69:16:1f:51:65:b4:46:a4:b1:8e:de:19:2d:c6:9e: 8f:f4:c5:8c:94:e0:be:ab:31:15:34:28:15:86:e7:be:b7:c1: ec:f9:a8:26 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUQwQllUaVuXctOrNso3nY7xWrSkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDlaFw0yNzA5MTYwNTQ2MDlaMDMxMTAvBgNV BAMTKDU5M0E4NkQzOTg4RkM2Qzk1NUFDODBFQzJBRkZDNTVEMjZDOTMwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpqHLUkvYWhCL9/7fRgxu0pAk gLxDo4INdeR99VQg8sQM7mWA25XBdadVgyYgvtnD0TepD+C9kkhRj29fm+PDDS1F xK5Zb8GMDtj3rOPngPGrW+0LxT+Pwyu/xPlbAArXH1yLC7iEvGMbNEWo39Rsa4dL GWS71gQfpU7Jj2LwQX5o2ZUWok+Dd1xVdWHe96FBusU7LOeiPHKyHlR9UywO0Fqp tv5v23a1IRENxiV3yMH/bILPU3jrIfLFM9fAMwkew5U0QEE3iLjCU15HVwyWZXSH i3tLOidmaHRKT8uwcw2mfkQOF8sO86vPQy1KjUvX+s8cjbix2YQQtxEWAoXlAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUWTqG05iPxslVrIDsKv/FXSbJMHMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzOTJlMzEzODM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTMyMzMz MzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQByJW6MA0GCSqGSIb3DQEBCwUAA4IBAQAaCcFuXa3MRnZC 9lbCP9JvDR4XFOl8aSrmkwzjS1EXxKu4ApQAYdKdCIqbkVQ60e35ubKnIfIQPQcS lrEgku0SmgQgfRoq1sCpU/c8vt/1ZLAHXuSzFlaPPk73DQ5cDbQqKY1+c4xN+kpZ L4hD8GqT/G8/AGJ608RMw4qpzSFoqD5XxRUMUnsJXzIsOAAZ5cmxHOIe4L2vt0uR taL0U4rS+zl2FKArtpCDxfrXDpgF+HBbqcW7FBwksESah436Sxqc0xnmeC/0EbBP iZVKVtwMtBMSyTPCf+sGEzppFh9RZbRGpLGO3hktxp6P9MWMlOC+qzEVNCgVhue+ t8Hs+agm -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:45 2026 by rpki-client